$ rpki-client -vvf rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft File: tlibrFal3Iom2wcn-tRKkDpjxM8.mft (raw, json) Hash identifier: A4PaD2Dyu0uo5SXhMQgKmxcrE/2GOZHqvdq58z3k/Mo= Subject key identifier: 53:BB:01:33:E9:88:EF:68:15:28:C6:27:C6:E3:5C:DB:D4:D8:80:37 Authority key identifier: B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF Certificate issuer: /CN=A9138E67/serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF Certificate serial: 02C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft Manifest number: 02BC Signing time: Sun 27 Apr 2025 01:05:08 +0000 Manifest this update: Sun 27 Apr 2025 01:05:07 +0000 Manifest next update: Sun 04 May 2025 01:05:07 +0000 Files and hashes: 1: tlibrFal3Iom2wcn-tRKkDpjxM8.crl (hash: YIb2R6yRf+csyjpZQEUP9q1ubCDX4l+/1b2bk3wHd3I=) 2: 3889BE2CEDD611EC8E98151DC4F9AE02.roa (hash: smF54Fbc1JDJULTqaNTlYvlIX2BHToHjC9gpmy4IEp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:05:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 705 (0x2c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138E67, serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF Validity Not Before: Apr 27 01:05:07 2025 GMT Not After : May 4 01:05:07 2025 GMT Subject: CN=680d82c3-6581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3e:c8:73:43:90:2b:5f:10:3d:7e:9d:7d:42: 8b:f0:60:d5:5d:c6:f0:2f:ac:63:76:a3:58:b6:74: 07:6e:07:9f:4f:8c:6d:e3:7b:43:75:62:1c:6f:29: 85:05:3d:f7:be:cb:d0:99:61:78:9a:51:7f:88:1a: fe:bc:e3:09:03:08:04:e4:9a:6b:f0:16:3d:09:c9: b9:2e:31:4c:74:47:1f:59:63:89:3f:62:e2:e2:1d: 21:41:49:c2:cf:31:61:ce:8d:e0:5a:69:23:d4:84: f8:5b:08:22:2b:2f:d3:94:9c:54:42:b8:12:e9:74: e5:95:aa:b3:4a:38:a4:51:da:3d:c5:ad:50:37:7d: e2:ab:f6:d2:1a:0f:e7:53:3c:fa:e7:90:48:6d:95: eb:99:33:88:28:50:f8:6a:33:b0:c9:d0:0d:6a:ef: 33:f3:38:7f:bf:f7:8d:1c:75:7c:b6:1f:0b:7f:07: 49:67:5a:ab:2d:cb:a7:fc:2b:e6:a1:54:72:b8:be: 36:10:81:f1:5b:13:a5:75:22:02:a6:f0:ff:02:f7: ea:48:a8:84:f7:0c:b6:64:ec:de:e8:55:4f:ee:11: c8:46:57:62:89:c4:b4:69:4a:a9:f4:c9:9a:f1:39: 40:84:6a:90:5c:d5:a5:bf:22:cc:ce:af:d2:63:91: 1a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BB:01:33:E9:88:EF:68:15:28:C6:27:C6:E3:5C:DB:D4:D8:80:37 X509v3 Authority Key Identifier: keyid:B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:37:cd:21:c0:f9:fd:ad:5f:43:ab:84:fd:78:00:72:61:f4: f7:da:bf:d3:17:34:37:46:2d:69:54:e7:dd:4a:9c:6d:cc:4d: 12:8f:1e:ca:b8:32:8c:33:10:f4:03:0e:80:44:cb:38:5b:26: cd:19:d0:8a:ef:8c:f7:2a:70:f2:e2:8d:1b:b6:23:b9:93:ab: e6:18:f9:2c:d2:76:29:da:bf:fe:56:de:00:3d:4d:cd:f1:8e: 77:7b:16:4b:ff:0d:af:e8:8a:0c:ae:20:19:02:c1:43:ec:a5: ad:d5:79:5c:a6:a0:13:9b:52:9f:74:3d:74:3d:51:a3:67:3f: b2:ab:1c:1b:28:88:33:cd:7b:56:94:c0:8b:0b:48:47:8b:5a: c7:ac:b8:74:f6:cb:48:09:ab:56:79:ad:9d:16:d1:a6:da:f6: c6:a9:a2:e0:3a:d9:54:4f:c4:d1:83:51:b3:a3:99:67:bb:e3: 7c:7d:6d:f6:c4:54:54:d6:87:21:d9:c1:2c:ff:bd:ea:71:77: 8a:df:34:b9:eb:44:95:67:2d:e4:a2:fa:14:0a:82:f1:76:ed: 4a:d9:33:e3:a2:06:5b:27:85:64:74:2a:53:1e:75:ec:f1:f3: af:a1:a5:0f:e5:c7:2f:af:12:26:89:4f:87:1f:54:fc:7b:13: 86:f1:d1:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhFNjcxMTAvBgNVBAUTKEI2NTg5QkFDNTZBNURDOEEyNkRCMDcyN0ZBRDQ0QTkw M0E2M0M0Q0YwHhcNMjUwNDI3MDEwNTA3WhcNMjUwNTA0MDEwNTA3WjAYMRYwFAYD VQQDEw02ODBkODJjMy02NTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvD7Ic0OQK18QPX6dfUKL8GDVXcbwL6xjdqNYtnQHbgefT4xt43tDdWIcbymF BT33vsvQmWF4mlF/iBr+vOMJAwgE5Jpr8BY9Ccm5LjFMdEcfWWOJP2Li4h0hQUnC zzFhzo3gWmkj1IT4WwgiKy/TlJxUQrgS6XTllaqzSjikUdo9xa1QN33iq/bSGg/n Uzz655BIbZXrmTOIKFD4ajOwydANau8z8zh/v/eNHHV8th8LfwdJZ1qrLcun/Cvm oVRyuL42EIHxWxOldSICpvD/AvfqSKiE9wy2ZOze6FVP7hHIRldiicS0aUqp9Mma 8TlAhGqQXNWlvyLMzq/SY5EaaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFO7ATPp iO9oFSjGJ8bjXNvU2IA3MB8GA1UdIwQYMBaAFLZYm6xWpdyKJtsHJ/rUSpA6Y8TP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEU2Ny8yNzlDQkYwOEVE Q0YxMUVDQjVFNzREN0NDNEY5QUUwMi90bGlickZhbDNJb20yd2NuLXRSS2tEcGp4 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsaWJyRmFsM0lvbTJ3Y24tdFJLa0RwanhNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEU2Ny8yNzlDQkYwOEVEQ0YxMUVDQjVFNzREN0NDNEY5QUUwMi90bGlickZhbDNJ b20yd2NuLXRSS2tEcGp4TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuN80hwPn9rV9Dq4T9eAByYfT32r/TFzQ3Ri1pVOfdSpxtzE0Sjx7K uDKMMxD0Aw6ARMs4WybNGdCK74z3KnDy4o0btiO5k6vmGPks0nYp2r/+Vt4APU3N 8Y53exZL/w2v6IoMriAZAsFD7KWt1XlcpqATm1KfdD10PVGjZz+yqxwbKIgzzXtW lMCLC0hHi1rHrLh09stICatWea2dFtGm2vbGqaLgOtlUT8TRg1Gzo5lnu+N8fW32 xFRU1och2cEs/73qcXeK3zS560SVZy3kovoUCoLxdu1K2TPjogZbJ4VkdCpTHnXs 8fOvoaUP5ccvrxImiU+HH1T8exOG8dFX -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:31 2025 by rpki-client on console.sobornost.net